A register kept in confidence.

Provided by you. When you register, place an order, or correspond with the house, we collect particulars such as your name, institutional affiliation, email, postal address, phone number, and order details.

Collected automatically. When you visit the archive, we may collect device and session information — IP address, browser class, referral path, and pages viewed — to secure the site and understand how it is used.

Payment particulars. Card and bank details are handled by third-party payment processors under PCI-DSS obligations; the house does not store full card numbers on its own servers.

We use the particulars you provide to verify eligibility, fulfil orders, dispatch correspondence and certificates of analysis, respond to enquiries, and meet our record-keeping obligations under the research-use-only policy. We use collected session information to maintain the security and performance of the site.

Particulars are shared only with the service providers required to operate the house: our payment processor, our shipping carrier, the courier’s tracking service, our analytics provider, and any legal, accounting, or compliance advisors acting on our behalf. Each is bound by confidentiality and data-protection obligations commensurate with the particulars shared.

We do not sell personal information, and we do not share it for the behavioural advertising of unrelated products.

The archive uses a small number of cookies and similar storage mechanisms: essential cookies to operate the cart and the age notice, and analytics cookies to understand aggregate site use. You can manage cookies through your browser. Disabling essential cookies may prevent the cart or age notice from functioning as intended.

We retain order records and correspondence for the period required to support customer service, research-use compliance, tax, and accounting obligations — typically seven years. Registry email addresses are retained until the registrant asks to be removed.

Subject to applicable law, you may ask us to confirm what particulars we hold about you, correct inaccuracies, or delete information that is no longer required. Residents of jurisdictions with statutory privacy rights — including California under the CCPA/CPRA and individuals protected by the GDPR — may exercise those rights by writing to the address below.

The archive is restricted to visitors aged twenty-one and over. We do not knowingly collect information from anyone under that age. Where we discover that such information has been collected in error, we will delete it promptly.

The archive is hosted in the United States. Correspondents in other jurisdictions should be aware that their particulars will be transmitted to and processed in the United States, subject to the safeguards described in this policy.

We take reasonable administrative, technical, and physical safeguards to protect particulars from unauthorised access, alteration, or disclosure. No system, however, is perfectly secure; correspondents should use institutional email and avoid transmitting sensitive personal information through insecure channels.

When we revise this policy, the “Last revised” date above will change, and material revisions will be announced to registered correspondents where reasonably possible. Continued use of the archive after revision constitutes acceptance of the revised policy.

Privacy requests should be addressed to privacy@fortresspeptides.com, with enough detail to allow us to verify the request and respond within the period required by law.